| commit | 61fb0ba82c65734c6ed9b85b8dab4db72bd47fd0 | |
| author | Luke Howard <lukeh@padl.com> | |
| Thu, 23 Sep 2021 04:39:35 +0000 (23 14:39 +1000) | ||
| committer | Stefan Metzmacher <metze@samba.org> | |
| Wed, 27 Oct 2021 22:37:10 +0000 (27 22:37 +0000) | ||
| tree | 2834e8f8701efa753b11a630dcbc89154d5e4f6e | treesnapshot (tar.gz zip) |
| parent | 58bc0a4b7f1ec70e1d9e7a80dac6e85042cf7bc2 | commitdiff |
kdc: use ticket client name when signing PAC
The principal in the PAC_LOGON_NAME buffer is expected to match the client name
in the ticket. Previously we were setting this to the canonical client name,
which would have broken PAC validation if the client did not request name
canonicalization
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14881
[jsutton@samba.org Backported from Heimdal commit
3b0856cab2b25624deb1f6e0e67637ba96a647ac
- Renamed variable to avoid shadowing existing variable
]
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit 75d1a7cd14b134506061ed64ddb9b99856231d2c)
The principal in the PAC_LOGON_NAME buffer is expected to match the client name
in the ticket. Previously we were setting this to the canonical client name,
which would have broken PAC validation if the client did not request name
canonicalization
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14881
[jsutton@samba.org Backported from Heimdal commit
3b0856cab2b25624deb1f6e0e67637ba96a647ac
- Renamed variable to avoid shadowing existing variable
]
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit 75d1a7cd14b134506061ed64ddb9b99856231d2c)
| source4/heimdal/kdc/kerberos5.c | diffblobblamehistory |